$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json) Hash identifier: uPjB6pEtU/mORKHmX+ap0tRbWpJSqG024NEZR1pQcb4= Subject key identifier: 4D:87:37:89:AC:78:D2:21:8B:0E:F4:88:5D:B7:9C:5A:2A:0A:6B:D8 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019DB27D8832B3AE89E2D42D48D46A09ED37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft Manifest number: 18FD Signing time: Wed 22 Apr 2026 00:01:04 +0000 Manifest this update: Wed 22 Apr 2026 00:01:04 +0000 Manifest next update: Thu 23 Apr 2026 00:01:04 +0000 Files and hashes: 1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=) 2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=) 3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: KHUMO/Av544prxXfDOGChOBahOcXvydQ7xIO/oii0gI=) 4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=) 5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=) 6: Mqfw0R-H8vCy0F0kf3ENii9rv5c.roa (hash: yVvI0HdEf/H1QrUvDUpGVPHK9JSyS/y9MuhDAFTD8KE=) 7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=) 8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=) 9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=) 10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=) 11: TYy0_7J7KDgPFXIQznrWkATWKoo.roa (hash: S3jUpVJhOWtNPETQx6yVyRUSNY9H4HAxcLvNiQwtEuc=) 12: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=) 13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=) 14: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=) 15: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=) 16: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=) 17: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=) 18: pCVE5lGD8Vy-ElskGtB4I6sSAjg.roa (hash: eZJlHsrZQ1146ReM9KzwDX7BATtaYNhY9J9MSAdbqxA=) 19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=) 20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=) 21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 21:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:b2:7d:88:32:b3:ae:89:e2:d4:2d:48:d4:6a:09:ed:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Apr 22 00:01:04 2026 GMT Not After : Apr 23 00:01:04 2026 GMT Subject: CN=4d873789ac78d2218b0ef4885db79c5a2a0a6bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d6:85:8d:90:49:06:17:3d:95:99:1d:1a:ca: 30:32:fb:2f:f9:a6:9b:b4:63:f9:01:60:44:51:3e: da:07:d8:d0:00:09:7f:be:fc:36:58:ad:e8:61:ef: f7:19:60:bc:f4:15:be:94:15:a5:95:2b:c7:20:22: 5f:61:5a:d2:e6:2a:f4:3e:f0:4c:65:74:e6:4b:a9: 71:50:be:73:b7:39:94:ed:e1:af:66:c2:eb:c1:a1: b1:3f:98:38:e3:a6:01:e4:ac:f9:15:83:29:64:cb: 13:77:aa:fd:f7:18:c8:59:77:73:3a:dd:c0:a9:37: 4e:cf:e7:4f:01:10:d5:ec:d7:96:17:ea:65:33:df: b5:69:bb:38:95:c7:07:82:78:ca:5a:5b:34:d7:ca: d7:93:02:ee:d6:18:e4:73:0d:e3:b0:ce:cb:5d:d2: be:52:18:11:9e:9a:c9:8a:4c:7c:db:ec:0a:8c:66: 9d:bf:c3:aa:e3:46:c3:7a:b4:e2:d9:90:1a:6f:50: 57:7d:07:78:30:43:1e:9e:9e:71:2c:3f:bd:0b:69: 96:cb:6f:69:00:ac:9c:b3:a4:a4:e2:e9:e3:c1:93: 87:33:8b:4c:e4:fe:60:73:fd:d6:bd:ab:09:2d:f3: 29:ef:64:bd:88:ae:b1:68:5b:1a:a6:31:7b:be:f3: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:87:37:89:AC:78:D2:21:8B:0E:F4:88:5D:B7:9C:5A:2A:0A:6B:D8 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:53:07:af:89:16:4a:f9:03:69:8a:af:f0:0f:18:99:dd:98: fc:81:b2:b9:14:95:ad:c2:22:de:27:f1:b6:14:c9:19:87:c4: 13:6c:dd:7a:da:ac:4c:29:af:dd:75:fe:d8:ab:28:e6:17:cf: 69:df:1b:ac:a7:7a:a7:93:35:ef:07:77:59:13:f5:f7:00:ed: 52:da:9b:fe:cb:7d:e9:f1:83:6f:fa:34:d3:96:9b:bc:2f:1c: 09:26:4a:77:cb:da:46:83:43:ad:3d:a3:61:bf:49:2b:56:9a: 6c:1f:a7:77:7c:08:18:4e:a0:2b:9c:10:6c:44:2c:50:80:c2: 16:37:3e:79:98:3b:23:b4:b3:b2:18:86:74:0c:1e:a8:73:0c: 16:fb:70:75:6e:6c:5c:f6:37:18:73:71:9b:86:bc:39:8a:3f: 50:ec:ca:5d:05:c8:78:2f:dc:07:90:e0:b0:e1:35:65:c7:a8: 41:5b:db:90:87:0b:a2:27:9c:62:5e:66:6d:c0:01:da:10:9d: fa:96:d1:94:e2:e1:37:16:78:de:92:83:8d:aa:2b:70:7c:a3: c7:8d:6f:4f:77:67:45:67:d5:6d:69:3a:49:4a:e8:38:33:35: 52:da:f3:ca:fa:15:ce:19:56:8a:8a:21:56:67:27:f0:d7:bc: af:9d:1d:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2yfYgys66J4tQtSNRqCe03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwNDIyMDAwMTA0WhcNMjYwNDIzMDAwMTA0WjAzMTEwLwYDVQQD Eyg0ZDg3Mzc4OWFjNzhkMjIxOGIwZWY0ODg1ZGI3OWM1YTJhMGE2YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9aFjZBJBhc9lZkdGsowMvsv+aab tGP5AWBEUT7aB9jQAAl/vvw2WK3oYe/3GWC89BW+lBWllSvHICJfYVrS5ir0PvBM ZXTmS6lxUL5ztzmU7eGvZsLrwaGxP5g446YB5Kz5FYMpZMsTd6r99xjIWXdzOt3A qTdOz+dPARDV7NeWF+plM9+1abs4lccHgnjKWls018rXkwLu1hjkcw3jsM7LXdK+ UhgRnprJikx82+wKjGadv8Oq40bDerTi2ZAab1BXfQd4MEMenp5xLD+9C2mWy29p AKycs6Sk4unjwZOHM4tM5P5gc/3WvasJLfMp72S9iK6xaFsapjF7vvP6xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2HN4mseNIhiw70iF23nFoqCmvYMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1MHr4kW SvkDaYqv8A8Ymd2Y/IGyuRSVrcIi3ifxthTJGYfEE2zdetqsTCmv3XX+2Kso5hfP ad8brKd6p5M17wd3WRP19wDtUtqb/st96fGDb/o005abvC8cCSZKd8vaRoNDrT2j Yb9JK1aabB+nd3wIGE6gK5wQbEQsUIDCFjc+eZg7I7SzshiGdAweqHMMFvtwdW5s XPY3GHNxm4a8OYo/UOzKXQXIeC/cB5DgsOE1ZceoQVvbkIcLoiecYl5mbcAB2hCd +pbRlOLhNxZ43pKDjaorcHyjx41vT3dnRWfVbWk6SUroODM1UtrzyvoVzhlWiooh Vmcn8Ne8r50djA== -----END CERTIFICATE-----Generated at Wed Apr 22 02:55:45 2026 by rpki-client